Stanco Virus

Virus Name: Stanco Aliases: V Status: Rare Discovered: August, 1992 Symptoms: .EXE file growth; unusual error messages Origin: Eastern Europe Eff Length: 7,529 Bytes Type Code: PNCK - Parasitic Non-Resident .EXE Infector Detection Method: F-Prot, AVTK, Sweep, IBMAV, ViruScan, VAlert, NAV, NAVDX, ChAV, Sweep/N, AVTK/N, Innoc, IBMAV/N, NShld, NAV/N Removal Instructions: Delete infected files General Comments: The Stanco virus was submitted in August, 1992. It is originally from Eastern Europe. Stanco is a non-resident, direct action infector of .EXE programs. When a program infected with the Stanco virus is executed, this virus will infect one .EXE program located in the current directory. Infected programs will have a file length increase of 7,529 bytes with the virus being located at the beginning of the infected program. The file's date and time in the DOS disk directory listing will not be altered. The following text strings are contained in the viral code, but are not visible in infected programs as the virus replicates in a PKLited form: "Insufficient DOS Version ... must be 3.2x or greater!" "Write Protect Error \ Disk Full ..." "Error in file .EXE" "Abort" Systems infected with the Stanco virus may receive unusual error messages when the user attempts to execute infected programs, such as the Write Protect Error message indicated above.